SAP Enterprise Search for ABAP Missing Authorization Check Vulnerability Allowing Unauthorized Data Access

A vulnerability exists in SAP Enterprise Search for ABAP due to a missing authorization check. This flaw allows an attacker with high privileges to read and export database table contents into an ABAP report. The issue could significantly compromise data confidentiality while having a minor effect on data integrity. There is no impact on the application's availability.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive data, allowing for its export and potential misuse.

Remediation

Users are advised to consult the SAP Security Notes for guidance on applying necessary patches. SAP Security Patch Day occurs on the second Tuesday of each month, where security updates are released. For more information, visit the SAP Security Patch Day website.